CVE-2026-57811

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in Realtyna Realtyna Organic IDX plugin real-estate-listing-realtyna-wpl allows Remote Code Inclusion.This issue affects Realtyna Organic IDX plugin: from n/a through <= 5.2.0.

References

• https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43423
• https://patchstack.com/database/Wordpress/Plugin/real-estate-listing-realtyna-wpl/vulnerability/wordpress-realtyna-organic-idx-plugin-plugin-5-2-0-remote-code-execution-rce-vulnerability?_s_id=cve
• https://github.com/webshellseo8/CVE-2026-57811-Proof-of-Concept
• https://raw.githubusercontent.com/webshellseo8/CVE-2026-57811-Proof-of-Concept/main/README.md